Analyzed
about 5 hours
ago.
based on code collected
about 6 hours
ago.
Project Summary
VeraCrypt is a free disk encryption software brought to you by IDRIX (https://www.idrix.fr) and based on TrueCrypt.
It adds enhanced security to the algorithms used for system and partitions encryption and it also solves many vulnerabilities and security issues found in TrueCrypt.
All released are PGP signed with key 0x680D16DE (Fingerprint = 5069 A233 D55A 0EEB 174A 5FC3 821A CD02 680D 16DE), available on key servers and downloadable at https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc
In a Nutshell, VeraCrypt...
- ...
- ...
-
...
has a well established, mature codebase
maintained by a large development team
with increasing Y-O-Y commits -
...
took an estimated 72 years of effort (COCOMO model)
starting with its first commit in June, 2013
ending with its most recent commit 18 days ago
Quick Reference
https://git.code.sf.net/p/veracr...
TrueCrypt Collective License
Permitted
Forbidden
Required
These details are provided for information only. No information here is legal advice and should not be used as such.
Project Security
Vulnerabilities per Version ( last 10 releases )
Project Vulnerability Report
Security Confidence Index
Poor security track-record
Favorable security track-record
Vulnerability Exposure Index
Many reported vulnerabilities
Few reported vulnerabilities
Did You Know...
-
...
nearly 1 in 3 companies have no process for identifying, tracking, or remediating known open source vulnerabilities
-
...
by exploring contributors within projects, you can view details on every commit they have made to that project
-
...
there are over 3,000 projects on the Open Hub with security vulnerabilities reported against them
-
...
data presented on the Open Hub is available through our API
30 Day SummarySep 9 2025 — Oct 9 2025
|
12 Month SummaryOct 9 2024 — Oct 9 2025
|
